Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Right click on SystemLook.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.

Highlight and copy the following entries: into SystemLook's main text entry window. (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)

Press the Look button to start the scan. The scan will take a while so please be patient...When finished, a Notepad window will open with the results of the scan. A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt

Please post the contents of the SystemLook.txt file in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run

Contents of the zoek-results.log file

Contents of the SystemLook.txt log file

Do you see any changes in computer behavior?

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Hi there,Thanks for the note.I did download to CKScanner to downloads initially but realised my mistake and then downloaded again to desktop and ran from there. I missed the Java 7 but have removed it now - sorry my mistake!

Here is out outcome from the OTL Custom scan: (I'll post the outcome from the remaining steps separately).

Searching for "Babylon"[HKEY_CURRENT_USER\Software\Google\Google Toolbar\4.0\Quick Search\http://www.kfoxtv.com/news/26486632/detail.html]"changes "="{"debug":null,"ei":"ktG2TejZDMO58gP8raU9","hasEbmTidbits":true,"href":"http://www.kfoxtv.com/news/26486632/detail.html","htmlTidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 <EM>star signs</EM>, not 13."],"minimized":false,"query":"changes ","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=oil+and+mining+in+the+desert#sclient=psy&hl=en&rlz=1T4ADSA_enGB379GB380&source=hp&q=changes+&aq=f&aqi=g5&aql=&oq=&pbx=1&fp=aafed597cd0202f5","seen":false,"tidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 star signs, not 13."],"ved":null}"[HKEY_CURRENT_USER\Software\Google\Google Toolbar\4.0\Quick Search\http://www.kfoxtv.com/news/26486632/detail.html]"ktG2TejZDMO58gP8raU9"="{"debug":null,"ei":"ktG2TejZDMO58gP8raU9","hasEbmTidbits":true,"href":"http://www.kfoxtv.com/news/26486632/detail.html","htmlTidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 <EM>star signs</EM>, not 13."],"minimized":false,"query":"changes ","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=oil+and+mining+in+the+desert#sclient=psy&hl=en&rlz=1T4ADSA_enGB379GB380&source=hp&q=changes+&aq=f&aqi=g5&aql=&oq=&pbx=1&fp=aafed597cd0202f5","seen":false,"tidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 star signs, not 13."],"ved":null}"[HKEY_CURRENT_USER\Software\Google\Google Toolbar\4.0\Quick Search\http://www.villagevoice.com/movies/theaters/]"amour film + show times in south west england"="{"debug":null,"ei":"ysH-UIr4HYWf0QXpi4HwDA","fromVisualSnippet":false,"hasEbmTidbits":true,"href":"http://www.villagevoice.com/movies/theaters/","htmlTidbits":["495 Montauk Highway <em>West</em> Babylon, NY 11704; 631-587-7808"],"minimized":false,"query":"amour film + show times in south west england","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=amour+%2b+showing+in+the+south+west#hl=en&tbo=d&rlz=1T4ADSA_enGB379GB380&sclient=psy-ab&q=amour+film+%2B+show+times+in+south+west+england&oq=amour+film+%2B+show+times+in+south+west+england&gs_l=serp.3...113.12454.1.12740.20.20.0.0.0.2.2638.10575.5-1j1j2j1j2.7.0.les%3B..0.0...1c.1.AM_7Z6QDH5g&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.41248874,d.d2k&fp=145e449a990997f1&biw=1280&bih=622","seen":false,"tidbits":["495 Montauk Highway West Babylon, NY 11704; 631[HKEY_CURRENT_USER\Software\Google\Google Toolbar\4.0\Quick Search\http://www.villagevoice.com/movies/theaters/]"ysH-UIr4HYWf0QXpi4HwDA"="{"debug":null,"ei":"ysH-UIr4HYWf0QXpi4HwDA","fromVisualSnippet":false,"hasEbmTidbits":true,"href":"http://www.villagevoice.com/movies/theaters/","htmlTidbits":["495 Montauk Highway <em>West</em> Babylon, NY 11704; 631-587-7808"],"minimized":false,"query":"amour film + show times in south west england","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=amour+%2b+showing+in+the+south+west#hl=en&tbo=d&rlz=1T4ADSA_enGB379GB380&sclient=psy-ab&q=amour+film+%2B+show+times+in+south+west+england&oq=amour+film+%2B+show+times+in+south+west+england&gs_l=serp.3...113.12454.1.12740.20.20.0.0.0.2.2638.10575.5-1j1j2j1j2.7.0.les%3B..0.0...1c.1.AM_7Z6QDH5g&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.41248874,d.d2k&fp=145e449a990997f1&biw=1280&bih=622","seen":false,"tidbits":["495 Montauk Highway West Babylon, NY 11704; 631-587-7808"],"ved":null,[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]"DllName"="BabylonToolbar.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]"DllName"="BabylonToolbar.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]"DllName"="BabylonToolbarTlbr.dll"[HKEY_USERS\S-1-5-21-4264242866-4040763346-4289907682-1001\Software\Google\Google Toolbar\4.0\Quick Search\http://www.kfoxtv.com/news/26486632/detail.html]"changes "="{"debug":null,"ei":"ktG2TejZDMO58gP8raU9","hasEbmTidbits":true,"href":"http://www.kfoxtv.com/news/26486632/detail.html","htmlTidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 <EM>star signs</EM>, not 13."],"minimized":false,"query":"changes ","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=oil+and+mining+in+the+desert#sclient=psy&hl=en&rlz=1T4ADSA_enGB379GB380&source=hp&q=changes+&aq=f&aqi=g5&aql=&oq=&pbx=1&fp=aafed597cd0202f5","seen":false,"tidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 star signs, not 13."],"ved":null}"[HKEY_USERS\S-1-5-21-4264242866-4040763346-4289907682-1001\Software\Google\Google Toolbar\4.0\Quick Search\http://www.kfoxtv.com/news/26486632/detail.html]"ktG2TejZDMO58gP8raU9"="{"debug":null,"ei":"ktG2TejZDMO58gP8raU9","hasEbmTidbits":true,"href":"http://www.kfoxtv.com/news/26486632/detail.html","htmlTidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 <EM>star signs</EM>, not 13."],"minimized":false,"query":"changes ","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=oil+and+mining+in+the+desert#sclient=psy&hl=en&rlz=1T4ADSA_enGB379GB380&source=hp&q=changes+&aq=f&aqi=g5&aql=&oq=&pbx=1&fp=aafed597cd0202f5","seen":false,"tidbits":["sign is said to be a formation the ancient Babylonians discarded because they wanted 12 star signs, not 13."],"ved":null}"[HKEY_USERS\S-1-5-21-4264242866-4040763346-4289907682-1001\Software\Google\Google Toolbar\4.0\Quick Search\http://www.villagevoice.com/movies/theaters/]"amour film + show times in south west england"="{"debug":null,"ei":"ysH-UIr4HYWf0QXpi4HwDA","fromVisualSnippet":false,"hasEbmTidbits":true,"href":"http://www.villagevoice.com/movies/theaters/","htmlTidbits":["495 Montauk Highway <em>West</em> Babylon, NY 11704; 631-587-7808"],"minimized":false,"query":"amour film + show times in south west england","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=amour+%2b+showing+in+the+south+west#hl=en&tbo=d&rlz=1T4ADSA_enGB379GB380&sclient=psy-ab&q=amour+film+%2B+show+times+in+south+west+england&oq=amour+film+%2B+show+times+in+south+west+england&gs_l=serp.3...113.12454.1.12740.20.20.0.0.0.2.2638.10575.5-1j1j2j1j2.7.0.les%3B..0.0...1c.1.AM_7Z6QDH5g&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.41248874,d.d2k&fp=145e449a990997f1&biw=1280&bih=622","seen":false,"tidbits":["495 Mon[HKEY_USERS\S-1-5-21-4264242866-4040763346-4289907682-1001\Software\Google\Google Toolbar\4.0\Quick Search\http://www.villagevoice.com/movies/theaters/]"ysH-UIr4HYWf0QXpi4HwDA"="{"debug":null,"ei":"ysH-UIr4HYWf0QXpi4HwDA","fromVisualSnippet":false,"hasEbmTidbits":true,"href":"http://www.villagevoice.com/movies/theaters/","htmlTidbits":["495 Montauk Highway <em>West</em> Babylon, NY 11704; 631-587-7808"],"minimized":false,"query":"amour film + show times in south west england","searchUrl":"http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4ADSA_enGB379GB380&q=amour+%2b+showing+in+the+south+west#hl=en&tbo=d&rlz=1T4ADSA_enGB379GB380&sclient=psy-ab&q=amour+film+%2B+show+times+in+south+west+england&oq=amour+film+%2B+show+times+in+south+west+england&gs_l=serp.3...113.12454.1.12740.20.20.0.0.0.2.2638.10575.5-1j1j2j1j2.7.0.les%3B..0.0...1c.1.AM_7Z6QDH5g&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.41248874,d.d2k&fp=145e449a990997f1&biw=1280&bih=622","seen":false,"tidbits":["495 Montauk Highway West Babyl

Let the program run unhindered and reboot the PC when it is done.When the computer reboots, and you start your usual account, a Notepad text file will appear.

Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 2.SystemLookYou should still have SystemLook.exe on your desktop.

Right click on SystemLook.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.

Highlight and copy the following entries: into SystemLook's main text entry window. (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)

Press the Look button to start the scan. The scan will take a while so please be patient...When finished, a Notepad window will open with the results of the scan. A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt

Please post the contents of the SystemLook.txt file in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run

Contents of the SystemLook.txt log file

Do you see any changes in computer behavior?

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Hi,I tried to run the System Look, but it errored with a Run Time error - application was stopped in an unexpected way.I tried again with the same result. I then went back you your second post, to the link for System Look and downloaded it again and replaced the first version.Tried again but ended with the same error.

I tried to run the System Look, but it errored with a Run Time error - application was stopped in an unexpected way.I tried again with the same result. I then went back you your second post, to the link for System Look and downloaded it again and replaced the first version.Tried again but ended with the same error. Hope that this is ok?

Unfortunately it is not OK. Let's go on, but go the other way...

Step 1.Important! Please find on your Desktop and delete Extras.txt log file created by OTL at the first run.

OTL - Run Custom ScanYou should still have OTL.exe on your desktop.Important! Close all applications and windows so that you have nothing open and are at your Desktop.

Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.

Under Output, ensure that Minimal Output is selected.

Under Extra Registry section, select Use SafeList.

Click the Scan All Users checkbox.

Highlight and copy the following entries: into the text box. (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of a OTL.txt log file after OTL Custom Scan

Contents of a Extras.txt log file after OTL Custom Scan

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.